Oval Definition:	oval:org.mitre.oval:def:11041
Revision Date: 2013-04-29 Version: 12 Title: Cross-site scripting (XSS) vulnerability in jsp/cal/cal2.jsp in the calendar application in the examples web application in Apache Tomcat 4.1.0 through 4.1.39, 5.5.0 through 5.5.27, and 6.0.0 through 6.0.18 allows remote attackers to inject arbitrary web script or HTML via the time parameter, related to "invalid HTML." Description: Cross-site scripting (XSS) vulnerability in jsp/cal/cal2.jsp in the calendar application in the examples web application in Apache Tomcat 4.1.0 through 4.1.39, 5.5.0 through 5.5.27, and 6.0.0 through 6.0.18 allows remote attackers to inject arbitrary web script or HTML via the time parameter, related to "invalid HTML." Family: unix Class: vulnerability Status: ACCEPTED Reference(s): CVE-2009-0781 Platform(s): CentOS Linux 5 Oracle Linux 5 Red Hat Enterprise Linux 5 Product(s): Definition Synopsis RHEL5, CentOS5 or Oracle Linux 5 The operating system installed on the system is Red Hat Enterprise Linux 5 OR The operating system installed on the system is CentOS Linux 5.x OR Oracle Linux 5.x AND Configuration section tomcat5-servlet-2.4-api-javadoc is earlier than 0:5.5.23-0jpp.7.el5_3.2 OR tomcat5-jsp-2.0-api-javadoc is earlier than 0:5.5.23-0jpp.7.el5_3.2 OR tomcat5-jasper-javadoc is earlier than 0:5.5.23-0jpp.7.el5_3.2 OR tomcat5-servlet-2.4-api is earlier than 0:5.5.23-0jpp.7.el5_3.2 OR tomcat5-webapps is earlier than 0:5.5.23-0jpp.7.el5_3.2 OR tomcat5 is earlier than 0:5.5.23-0jpp.7.el5_3.2 OR tomcat5-jasper is earlier than 0:5.5.23-0jpp.7.el5_3.2 OR tomcat5-jsp-2.0-api is earlier than 0:5.5.23-0jpp.7.el5_3.2 OR tomcat5-server-lib is earlier than 0:5.5.23-0jpp.7.el5_3.2 OR tomcat5-common-lib is earlier than 0:5.5.23-0jpp.7.el5_3.2 OR tomcat5-admin-webapps is earlier than 0:5.5.23-0jpp.7.el5_3.2
BACK